Perform independent control testing activities and document results.
Use code to perform and/or automate analysis and repeatable tasks.
Leverage tools [e.g. Python/SQL] to extract and analyze data.
Visualize and create charts to support testing efforts.
Maintain a broad understanding of relevant operating systems and their respective vulnerabilities in order to quickly identify the severity of potential issues.
Demonstrate a broad understanding of major categories of cyber threats and the measures required to safeguard the enterprise.
Leverage reporting & tools to perform analysis on different types of projects or datasets & inform policies and drive change.
Possess an understanding of technology systems, including networks, applications, cloud computing, and data.
Analyze data, assess risk, & prioritize published vulnerabilities and potential risks to differentiate critical, high-risk, and low-risk issues.
Research, assemble, and/or evaluate information regarding industry practices or regulatory changes affecting cyber security policies or programs.
Make recommendations regarding changes to policy, procedures, and control programs to mitigate evolving risks.
Demonstrate sound lifecycle program management including documenting and communicating action plans, impediments, risks, and stakeholder engagement.
Report on vulnerability assessment to ensure proper functionality and alignment with Information Security Standards.

High School Diploma, GED or Equivalent Certification
At least 2 years of experience in Risk Management, Process Management, Project Management, or a combination of these
At least 2 years of experience in technology or cyber security risk management
At least 1 year of experience working with at least one scripting language
Bachelor's Degree or Military Experience (Preferred)
2+ years of experience testing Technology controls (Preferred)
Risk Certifications (CRISC, CISM, CRCM, CIPP, CISA, CISSP, ABA Risk Mgmt Certification) (Preferred)
3+ years of Risk Management experience in Cyber or Information Security (Preferred)
Project Management experience leading cross-functional projects in Risk (Preferred)
Experience with AWS, GCP, or Azure cloud technologies (Preferred)
Strong communication and presentation skills (Preferred)
Experience with security operations, data loss prevention, or access management (Preferred)
Scripting experience in Python or SQL (Preferred)

Senior Associate, Technology Controls Testing – Enterprise Services Risk

Key skills